The root key sentinel feature needs backporting to all branches so it can get into wide use quickly. The backport to 9.11 and earlier isn't straightforward, though; this issue is for that work.